$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft File: tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json) Hash identifier: L1IvfqHXSP8JJaa9Abo5DK0e/mh0pzR6W4sx2ywGQoI= Subject key identifier: A1:70:B6:2C:89:74:5F:14:17:7C:48:03:23:03:9C:E2:12:59:60:C0 Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 Certificate issuer: /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft Manifest number: 05DD Signing time: Tue 04 Nov 2025 23:11:40 +0000 Manifest this update: Tue 04 Nov 2025 23:11:40 +0000 Manifest next update: Tue 11 Nov 2025 23:11:40 +0000 Files and hashes: 1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: yNAKyDUs5zMNF+/HUkg9t8rx/6kNHGTjpL6lMzGQ9UY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Validity Not Before: Nov 4 23:11:40 2025 GMT Not After : Nov 11 23:11:40 2025 GMT Subject: CN=690a882c-3d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:75:6a:6d:d6:e1:7d:f0:6e:ca:53:d7:55:12: a7:e8:18:20:0d:10:54:ce:ab:d4:8e:3f:df:f8:28: 9a:73:21:a1:5e:12:83:44:f0:9d:fd:f8:ac:bd:31: f6:d5:7c:f2:b2:a1:3b:04:71:d8:27:ca:2c:06:cf: 3f:da:13:27:29:cd:95:9b:48:37:28:ad:ee:c9:07: bb:89:fb:01:bb:5a:7d:c7:25:3f:6b:7e:d2:9e:e6: eb:31:79:73:5a:7b:73:12:d0:92:8e:e0:f3:31:14: 68:89:15:9f:67:71:61:73:80:44:51:78:5f:2e:fa: 14:62:c8:03:3c:82:8c:d3:e7:b7:67:f0:16:e0:69: 5c:30:dd:2f:ed:fd:ac:10:fd:3a:5e:d8:93:5c:d3: d5:9e:8c:dd:4d:2b:cd:34:fe:1a:56:8f:ea:ea:85: 05:9f:b7:8e:5d:9c:6d:6f:30:60:d4:18:4a:8a:f7: d1:0e:c4:07:c7:e0:1e:27:5e:1b:2c:b5:4d:ad:47: e0:67:a6:31:36:2b:0f:c7:9a:31:db:df:93:34:48: b5:0c:40:e9:81:50:87:1b:f7:aa:f5:b7:2f:61:50: c4:27:ce:48:76:15:4a:36:ee:88:37:d7:94:b0:4f: 27:8f:ec:ba:64:f2:b8:df:54:f5:ee:1f:5d:29:37: 6c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:70:B6:2C:89:74:5F:14:17:7C:48:03:23:03:9C:E2:12:59:60:C0 X509v3 Authority Key Identifier: keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:c6:f3:e0:69:bc:d0:99:97:d6:02:b4:d7:2b:19:42:cc:a4: 34:b1:66:c7:86:2d:0a:a7:d3:fc:74:1e:33:7b:7d:6e:78:09: 58:a6:d6:f8:6c:63:8f:27:d5:53:ed:36:1b:31:99:d3:cd:ce: b5:10:9a:7f:49:c4:0d:3d:7b:dd:10:42:08:ba:cf:7b:c5:7f: da:15:c1:65:fc:be:76:d6:c1:13:c4:e6:1b:8b:6e:a3:7a:32: 8e:87:4f:06:85:37:51:2b:bb:69:9f:67:e7:73:32:c2:b7:a4: 5a:7a:1a:c8:60:f5:bc:5b:17:91:a2:35:9f:49:ad:94:63:2a: 03:0d:17:68:f8:8b:cb:a7:6a:8a:13:1c:87:b5:9f:2a:d2:a1: ce:7b:b4:57:bb:18:12:f2:df:c9:d3:82:e5:d1:97:82:07:5e: 44:e8:c0:64:4c:d5:16:28:6e:f5:26:7c:c4:c0:0d:5a:e5:c8: 63:65:76:6a:7c:fc:9d:8e:0c:df:29:70:c8:47:b0:bf:7e:21: 6b:dc:81:8b:00:44:fe:bf:2b:28:ba:e1:f8:82:cf:50:ea:a1: 58:3e:80:46:af:2d:e8:b2:e9:49:26:9f:d3:8a:bc:1e:c1:f2: 15:eb:27:d4:4c:84:de:27:17:13:a7:d8:06:e1:19:2d:fa:08: c9:bc:dc:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUYxMTAvBgNVBAUTKEI2NjQ1MUY5NzE4OENBRjgxODREMDdDMTMwQTI1RDk1 NzZGOEMxMDUwHhcNMjUxMTA0MjMxMTQwWhcNMjUxMTExMjMxMTQwWjAYMRYwFAYD VQQDEw02OTBhODgyYy0zZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33VqbdbhffBuylPXVRKn6BggDRBUzqvUjj/f+CiacyGhXhKDRPCd/fisvTH2 1XzysqE7BHHYJ8osBs8/2hMnKc2Vm0g3KK3uyQe7ifsBu1p9xyU/a37SnubrMXlz WntzEtCSjuDzMRRoiRWfZ3Fhc4BEUXhfLvoUYsgDPIKM0+e3Z/AW4GlcMN0v7f2s EP06XtiTXNPVnozdTSvNNP4aVo/q6oUFn7eOXZxtbzBg1BhKivfRDsQHx+AeJ14b LLVNrUfgZ6YxNisPx5ox29+TNEi1DEDpgVCHG/eq9bcvYVDEJ85IdhVKNu6IN9eU sE8nj+y6ZPK431T17h9dKTdscwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFwtiyJ dF8UF3xIAyMDnOISWWDAMB8GA1UdIwQYMBaAFLZkUflxiMr4GE0HwTCiXZV2+MEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBRi9GRDY1QjREOEU0 QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2Z1lUUWZCTUtKZGxYYjR3 UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtUlItWEdJeXZnWVRRZkJNS0pkbFhiNHdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBRi9GRDY1QjREOEU0QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2 Z1lUUWZCTUtKZGxYYjR3UVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBixvPgabzQmZfWArTXKxlCzKQ0sWbHhi0Kp9P8dB4ze31ueAlYptb4 bGOPJ9VT7TYbMZnTzc61EJp/ScQNPXvdEEIIus97xX/aFcFl/L521sETxOYbi26j ejKOh08GhTdRK7tpn2fnczLCt6RaehrIYPW8WxeRojWfSa2UYyoDDRdo+IvLp2qK ExyHtZ8q0qHOe7RXuxgS8t/J04Ll0ZeCB15E6MBkTNUWKG71JnzEwA1a5chjZXZq fPydjgzfKXDIR7C/fiFr3IGLAET+vysouuH4gs9Q6qFYPoBGry3osulJJp/Tirwe wfIV6yfUTITeJxcTp9gG4Rkt+gjJvNwi -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:28 2025 by rpki-client